Note that there are some explanatory texts on larger screens.

plurals
  1. POGerrit and Active Directory
    primarykey
    data
    text
    <p>I'm trying to set up Gerrit to use our corporate Active Directory for authentication. I know plenty of people have managed to get this to work but it just won't work for me.</p> <p>If I run an <code>ldapsearch</code> command as follows I get the correct result, so I know my search strings are correct:</p> <pre><code>ldapsearch -h myserver -b "CN=Users,DC=mycompany,DC=com" -D "CN=adam,CN=Users,DC=mycompany,DC=com" -w mypassword "(sAMAccountName=adam)" </code></pre> <p>But using these same settings in my Gerrit config doesn't work:</p> <pre><code>[auth] type = LDAP [ldap] server = ldap://myserver accountBase = CN=Users,DC=mycompany,DC=com groupBase = OU=Gerrit,DC=mycompany,DC=com user = CN=adam,CN=Users,DC=mycompany,DC=com password = mypassword referral = follow accountPattern = (sAMAccountName=${username}) groupPattern = (cn=${groupname}) accountFullName = displayName accountMemberField = memberOf accountEmailAddress = mail </code></pre> <p>When I try to log in using my account I get the following exception in <code>etc/error_log</code>:</p> <pre><code>[2012-05-04 10:03:04,595] ERROR com.google.gerrit.server.auth.ldap.LdapRealm : Cannot query LDAP to autenticate user javax.naming.NamingException: [LDAP: error code 1 - 00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece^@]; remaining name 'CN=Users,DC=mycompany,DC=com' at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3072) at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2978) at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2785) at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1839) at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1762) at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1779) [...] </code></pre> <p>Has anyone set up a similar configuration that might be able to help?</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload